Convert confirmed security findings into automated detection modules with YAML frontmatter.
npx skills add https://github.com/JoranHonig/grimoire --skill scribe-distill
Please help me install this Agent Skill. Skill: scribe-distill Source: https://github.com/JoranHonig/grimoire/tree/main/skills/scribe-distill Command: npx skills add https://github.com/JoranHonig/grimoire --skill scribe-distill
The scribe-distill skill converts confirmed security findings into repeatable, discoverable detection artifacts so researchers do not lose remediation knowledge and can automatically scan for recurring issues.
Ask the scribe-distill skill to "distill this finding" and attach the finding file plus contextual metadata so it can assess feasibility and create a detection module.
High-intent search queries and answers about installing and using this skill.
To turn security findings into automated detection checks, you distill the confirmed vulnerability into a reusable code shape. The process generates a detection module with YAML frontmatter, grep-able patterns, and validation steps to integrate into your project's spellbook.
Automating vulnerability detection involves transforming audit findings into discoverable knowledge artifacts. By extracting the vulnerability pattern and classifying its feasibility, you create reusable detection modules that automatically scan codebases to prevent regressions.
Yes, you can assess the feasibility of automating a security finding. The distillation process classifies findings as static-feasible, agentic-feasible, or not automatable based on provided criteria to determine if automated detection checks can be generated.
Generalizing a vulnerability instance requires stripping instance-specific details to express the issue as a reusable code shape or invariant. This pattern extraction allows the specific finding to be converted into a grep-able detection check for broader codebase application.
Yes, you need to attach the finding file and contextual metadata to generate a detection module. This information is required to accurately assess the vulnerability's feasibility and create a validated check with proper assessment guidance.
dnvitiGenerate a security report from vulnerability scan findings with remediation steps.
HorusGoulAnalyze React codebases for security, performance, and architectural issues.
xxihValidate Spring Boot applications with build, static analysis, coverage, and security scans.
PriyanshKuniyalConfigures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.
